Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/FPxMaLYsT21yH0_UFUXPxBLvc3A.roa
File:                     FPxMaLYsT21yH0_UFUXPxBLvc3A.roa (raw, json)
Hash identifier:          o8M5hM0Zz7iyNdYaS/ZSY3YTpKIfVIrib4RRKRAqvLU=
Subject key identifier:   14:FC:4C:68:B6:2C:4F:6D:72:1F:4F:D4:15:45:CF:C4:12:EF:73:70
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       06A0
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FPxMaLYsT21yH0_UFUXPxBLvc3A.roa
Signing time:             Tue 31 Mar 2026 07:28:17 +0000
ROA not before:           Tue 31 Mar 2026 07:28:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10010
IP address blocks:        218.219.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1696 (0x6a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Mar 31 07:28:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=14FC4C68B62C4F6D721F4FD41545CFC412EF7370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5b:18:dd:de:18:7d:90:45:10:15:ce:50:c7:
                    d2:fa:fb:fd:85:24:7d:a6:7b:f4:9f:3c:8b:cf:79:
                    6a:3f:2e:d6:92:df:f1:91:7b:dd:fd:f0:38:9d:ed:
                    db:7c:3b:c8:b3:ed:f0:7c:35:09:7f:32:97:f2:6e:
                    eb:7f:df:aa:e4:43:e4:d2:68:3e:e6:d2:cb:d2:9c:
                    f3:71:00:1a:b8:88:64:65:ab:07:d1:e5:d2:0e:e6:
                    e4:23:49:67:ac:85:ac:7c:e7:b6:4a:c5:d5:00:77:
                    6e:07:83:88:d9:6a:86:0a:a7:1b:b8:c9:91:80:bc:
                    51:ff:ad:81:8b:e5:39:0c:26:18:d7:48:f5:f3:3f:
                    ca:d8:00:b5:26:9e:71:56:05:95:71:3f:38:1c:1c:
                    32:46:50:de:0d:1d:64:d5:b0:13:70:6a:07:84:cd:
                    68:91:4c:14:cb:6a:28:19:36:9a:b0:ea:b4:bb:b5:
                    51:b6:17:0c:7a:80:d0:00:e3:34:01:1a:77:57:b0:
                    59:c7:cc:1d:38:2e:2d:9d:4c:46:33:b4:89:2c:cf:
                    21:fb:f9:80:ab:63:46:ba:2f:8c:d8:64:70:1f:1e:
                    c1:32:94:4e:22:9f:33:2f:fe:1e:74:b9:db:f0:bb:
                    2c:d8:dd:1a:54:78:86:29:47:92:f5:9d:7a:9b:96:
                    b4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FC:4C:68:B6:2C:4F:6D:72:1F:4F:D4:15:45:CF:C4:12:EF:73:70
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FPxMaLYsT21yH0_UFUXPxBLvc3A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ab:d9:8e:77:fb:7f:a1:bc:68:f0:ec:28:c6:43:46:32:5a:a2:
         82:8d:0b:bf:3b:85:aa:cb:d5:6e:c7:43:5d:72:80:5e:5b:1b:
         b4:55:5e:3e:b3:8e:4b:df:08:0a:ee:b3:09:8f:92:3a:81:a0:
         a7:14:95:1a:0b:21:8d:cc:7d:1b:6c:44:9a:0d:79:8c:b9:d0:
         2d:c7:79:59:ee:58:58:f4:c7:41:19:28:04:e7:43:ed:d2:6d:
         24:7f:47:b9:b7:0b:79:29:f5:44:ca:50:40:2f:11:8c:43:92:
         41:f5:70:86:b2:5f:c3:c7:a4:7a:46:fc:ae:cc:c9:55:89:73:
         4e:2c:d1:56:71:80:5d:f4:7e:cd:56:54:25:0a:bd:f0:16:f2:
         66:ff:00:49:fd:96:dd:43:47:6f:1e:bd:da:24:68:e2:17:f4:
         75:71:8f:8b:e8:7e:9e:22:5c:1f:f6:54:ce:e3:1a:f5:9d:c1:
         8c:f5:fa:73:7d:59:fb:27:d5:d0:c6:9d:0e:24:d6:41:50:40:
         d3:77:c3:64:e5:3d:b6:da:49:cb:a8:59:b3:f7:4f:a6:54:74:
         51:8a:08:a9:87:10:63:88:ec:a7:a1:1f:5b:72:4b:23:36:ac:
         a5:7a:17:69:66:11:90:86:53:ff:21:fb:26:61:ca:da:2d:19:
         46:e4:6b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:34:28 2026 by rpki-client